plugin dns executes after plugin role